pypi package report

Is com.coravy.hudson.plugins.github:github safe?

1 known vulnerability, worst severity MODERATE.

cvss

5.0

how bad it is if exploited, out of 10

epss

0.90%

chance of exploitation in the next 30 days

xyz score

not scored

CyberXYZ composite, out of 10

fig. 01 — GHSA-v7g7-cmxx-wxw9, the advisory selected below

// advisories

GHSA-v7g7-cmxx-wxw9

MODERATECVE-2018-1000183

A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubServerConfig.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Affected: <= 1.29.0
Fixed in: 1.29.1
Published: 2022-05-14
Source: github

GHSA NVD MITRE reference reference

// dependencies

0 direct

// ai model usage

No published models are known to use this package.

Checked 2026-09-22 at 02:32 UTC. The most recent advisory here was published 2022-05-14. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is com.coravy.hudson.plugins.github:github safe? pypi package security report | CyberXYZ